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AMENDMENTS TO THE CLAIMS : 

This listing of claims will replace all prior 
versions, and listings of claims in the application: 

LISTING OF CLAIMS : 
1-15 (cancelled) 

16. (new) Traceable method for encrypting and/or decrypting 
data broadcast by at least one transmitter towards several 
decoders, this method enabling the identification of a traitor, 
amongst different lawful users of the decoders, who has 
communicated secret data to a non-authorized third party so that 
this third party is able to encrypt and/or decrypt data broadcast 
by the transmitter, 

in which: 

- during encryption of the broadcast data, the transmitter 
applies at least a first secret cryptographic function, and 

- during decryption of said broadcast data, all the decoders 
apply at least one same second secret cryptographic function 
identical to said first function or its inverse, each decoder 
having recourse for this purpose to a mathematical description of 
said second function recorded in a memory, 

wherein during the application of the second function the 
mathematical description of this second function, to which each 
decoder has recourse, is different from one decoder to another or 
from one group of decoders to another so that the mathematical 
description to which recourse is made exclusively identifies the 
particular decoder or group of decoders among all the decoders. 

17. (new) Method as in claim 16, wherein the second 
cryptographic function is able to process non-redundant data. 

18. (new) Method as in claim 16, wherein said mathematical 
description (F K j) recorded in the memory of each decoder is 
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formed of several elementary functions (Gi,j) which must be 
composed with each other in a determined order to form said 
second secret function. 

19. (new) Method as in claim 18, wherein each elementary 
function (G if j) is equal to the composite of at least three 
functions as per one of the following equations: 

Gi,j = f ' 1, j og aj (i) OS 
G 2 ,j = f ' 2 ,j Og^ (2) Ofi,j 

G r -l,j = f 'r-l,j Ogaj (r-1) Of r -2,j 
G r ,j = T Og aj (r) Of r -l, j 

in which: 

- G if j is the -th elementary function of decoder j, j being 
the index identifying a decoder or group of decoders, 

- functions fi,j and f ' i,j are predefined functions able to 
render the elementary functions Gi,j non-commutative between each 
other, 

- aj is a permutation of all indices {1; r} unique to each 
decoder or group of decoders, 

- goj(t) is the a j(t) ~th function of a predefined whole 
formed of r non-linear predefined functions gi commutative 
between each other, and 

- S and T are predefined functions able to render difficult 
the cryptanalysis of elementary functions Gi,j and G r ,j 
respectively, 

20. (new) Method as in claim 19, wherein each function f 

'ii is equal to the inverse f of function fi,j. 

ij 

21. (new) Method as in claim 19, wherein the functions f^j 
are linear functions of a set (L n ) of the tuples of elements of a 
finished body (L) on itself. 
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22. (new) Method as in claim 19, wherein the functions S 
and T are invertible. 

23. (new) Method as in claim 19, wherein the functions S 
and T are linear functions of a set (L») of the tuples of 
elements of a finished body (L) towards itself. 

24. (new) Method as in claim 19, wherein the functions g ± 
are chosen so that each elementary function G irj corresponds to 
an encryption block of a multivariate encryption algorithm. 

25. (new) Method as in claim 19, wherein each function gi 
is of the form gi(a) = a ei in which a is an element of an L' 
extension of degree n of a basic body L with q elements, and ei 
is a predefined exponent. 

26. (new) Method as in claim 25, wherein the exponent ei is 

of the form : 

1+/ 1 + ... +q 61 + ... +q 6d ~ X , in which the exponents 6t are predefined 
integers . 

27. (new) Data recording medium, wherein it comprises 
instructions for the execution of a traceable encryption and/or 
decryption method according to claim 16, when these instructions 
are executed by a decoder. 

28. (new) Data recording medium, wherein it comprises 
instructions for the execution of a traceable data encryption 
and/or decryption method as in claim 16, when said instructions 
are executed by a transmitter. 

29. (new) Traceable system for encrypting and/or decrypting 
broadcast data capable of identifying a traitor, among different 
lawful users, who has communicated secret data to a non- 
authorized third party so that this third party is able to 
encrypt and/or decrypt the broadcast data, this system 
comprising : 

- a transmitter able to encrypt broadcast data, this 
transmitter being capable of applying at least a first secret 
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cryptographic function, to directly process a message, then of 
broadcasting the message, 

- several decoders able to decrypt broadcast data, all the 
decoders being able to apply a second secret cryptographic 
function identical to said first function or to its inverse for 
the direct processing of said broadcast message, each decoder for 
this purpose being equipped with a memory in which a mathematical 
description of said second function is recorded; 

wherein the memory of each decoder contains a mathematical 
description of said second function different from the one 
recorded in the memory of the other decoders or in the memory of 
the other groups of decoders so that this mathematical 
description exclusively identifies the particular decoder or 
group of decoders among all the decoders. 

30. (new) Memory intended to be associated with a decoder 
of a traceable data encryption and/or decryption system according 
to claim 28, wherein it comprises a mathematical description 
equivalent to said second secret function able to be used by the 
decoder, this mathematical description consisting of several 
elementary functions (G ifj ) each of which is equal to the 
composite of at least three functions as per one of the following 
equations : 

Gi,j = f ogoj (i) OS 

G2,j = f '2,j og CT j (2) Ofl,j 



G r -i,j = f 'r-l,j Ogoj (r-1) Of r -2,j 
G r ,j = T Og aj (r) Of r - 1(j 

in which: 

- G i(j is the -th elementary function of decoder j, j being 
the index identifying a decoder or group of decoders, 
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- functions fi,j and f are predefined functions able to 
render the elementary functions Gi,j non-commutative between each 
other, 

- aj is a permutation of all indices {1; r} unique to each 
decoder or group of decoders, 

- goj(t) is the &i(t) "th function of a predefined whole 
formed of r non-linear predefined functions gi commutative 

between each other, and 

- S and T are predefined functions able to render difficult 
the cryptanalysis of elementary functions G i# j and G r ,j 
respectively . 

31. (new) Data recording medium, wherein it comprises 
instructions for the execution of a traceable data encryption 
and/or decryption method as in claim 17, when said instructions 
are executed by a transmitter. 

32. (new) Data recording medium, wherein it comprises 
instructions for the execution of a traceable data encryption 
and/or decryption method as in claim 18, when said instructions 
are executed by a transmitter. 

33. (new) Data recording medium, wherein it comprises 
instructions for the execution of a traceable data encryption 
and/or decryption method as in claim 19, when said instructions 
are executed by a transmitter. 

34. (new) Data recording medium, wherein it comprises 
instructions for the execution of a traceable data encryption 
and/or decryption method as in claim 20, when said instructions 
are executed by a transmitter. 

35. (new) Data recording medium, wherein it comprises 
instructions for the execution of a traceable data encryption 
and/or decryption method as in claim 21, when said instructions 
are executed by a transmitter. 
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